52 matches found
CVE-2018-12258
An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With physical access, an attacker can upgrade the firmware in under 60 seconds by inserting an SD card containing the firmware with name 'ezviz.dav' and rebooting...
CVE-2018-12259
An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any restrictions, which leads to full system compromise...
CVE-2018-12323
An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at the console...
CVE-2018-12260
An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command 'showKey' from the root CLI. This password may be the same on all devices...
CVE-2018-12257
An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with CLI access is able to remotely upgrade firmware to a custom image due to lack of SSL validation by changing the nameservers in...
EUVD-2018-4237
Malware in sbrugna...
EUVD-2018-4238
Malware in sbrugna...
EUVD-2018-4239
Malware in sbrugna...
EUVD-2018-4235
Malware in sbrugna...
EUVD-2018-2402
Malware in sbrugna...
CVE-2018-12261
An issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root...
Unspecified Vulnerability in Momentum Axel 720P
The Momentum Axel 720P is a dual-band HD camera that supports WiFi connectivity. A security vulnerability exists in the Momentum Axel 720P that stems from the use of hard-coded passwords for the root and admin accounts: EHLGVG. An attacker in close physical proximity could exploit this...
Momentum Axel 720P Hardcoded RTSP Certificate Vulnerability
The Momentum Axel 720P is a dual-band HD camera that supports WiFi connectivity. A security vulnerability exists in the Momentum Axel 720P version 5.1.8. An attacker can exploit the vulnerability by injecting an SD Card with firmware named 'ezviz.dav' to upgrade the firmware using this file...
Momentum Axel 720P Buffer Overflow Vulnerability
The Momentum Axel 720P is a dual-band HD camera that supports WiFi connectivity. A buffer overflow vulnerability exists in Momentum Axel 720P version 5.1.8. An attacker can exploit this vulnerability to gain access to user accounts...
Momentum Axel 720P Information Disclosure Vulnerability
The Momentum Axel 720P is a dual-band HD camera that supports WiFi connectivity. A security vulnerability exists in Momentum Axel 720P version 5.1.8. An attacker can exploit the vulnerability by issuing the 'showKey' command to obtain a plaintext password...
Momentum Axel 720P Root Account Vulnerability
The Momentum Axel 720P is a dual-band HD camera that supports WiFi connectivity. A security vulnerability exists in Momentum Axel 720P version 5.1.8. The vulnerability can be exploited by an attacker to gain root privileges with the help of a UART pin code to take full control of the system...
Momentum Axel 720P DNS Hijacking Vulnerability
The Momentum Axel 720P is a dual-band HD camera that supports WiFi connectivity. A security vulnerability exists in the Momentum Axel 720P version 5.1.8, which stems from the program's lack of SSL authentication. A remote attacker can exploit the vulnerability by hijacking DNS to upgrade the...
CVE-2018-12323
An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at the console...
CVE-2018-12323
An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at the console...
Hardcoded credentials
An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at the console...